Path: utzoo!utgpu!jarvis.csri.toronto.edu!mailrus!uwm.edu!gem.mps.ohio-state.edu!wuarchive!udel!rochester!uhura.cc.rochester.edu!jap2_ss
From: jap2_ss@uhura.cc.rochester.edu (The Mad Mathematician)
Newsgroups: comp.sys.mac
Subject: The not-so-new virus
Message-ID: <3248@ur-cc.UUCP>
Date: 6 Oct 89 19:24:06 GMT
Reply-To: jap2_ss@uhura.cc.rochester.edu (The Mad Mathematician)
Organization: University of Rochester
Lines: 34

The following is a copy of the message sent ot others on our campus
about the reported virus.

  When it first appears, it's just a form of the nVIR virus which AntiPan
  works very well to eradicate.  But it seems to be a self modifying code
  which causes it to mutate to an unrecognizable form.  SO, what do we do
  about it, you ask?

  Well, we have had exceedingly good success in both TAGGING and ERADICATING
  the virus with a program called SYMANTEC ANTI-VIRUS CLINIC.  If the virus 
  is tagged, it can be eradicated with AntiPan, or it can be eradicated with
  SAM, the SYMANTEC ANTI-VIRUS CLINIC.  So when people bring you their disks
  to have checked, please run SAM on them.  It's very easy, there will be 
  instructions at the desk.

Please note that no other programs could find it, including Disinfectant,
Virex, Virus Rx, Virus Detective, or Interferon.  Vaccine did not stop it.
I will try Gatekeeper as soon as someone gives me a copy (grrr.)
I will also distribute copies of an infected system at that time. 
This version does not show up as a resource added named nVIR, and
attacked a System that was supposedly nVIR immune, and had 
Vaccine installed.  
This is not an endorsement of any of the above products.
About the Macwight/Macwite situation: since the first posting I 
have ben unable to find any more changed copies.  The STR 801 
resource can be the result of a bug in Macwrite 5.0, or of
a Macwrite with font information installed.  However, I know of no bugs
that rewrite ICN resources or application names.  I will continue to
search.


The Mad Mathematician
jap2_ss@uhura.cc.rochester.edu
Understand the power of a single action.  (R.E.M.)